Did PoE get hacked?

"

MhBlis a écrit :

Actually I have the same problem. Clean machine with a new email account and the password I used here is not something I've ever used before. Router has not been reset or restared since I started on PoE.

Didn't lose anything but then my account is only level 11.

The log in supposedly came from Jilan, Jilan China.


Is it perhaps something else in the way their security protocols work?

To my knowledge, the only way your account can be locked is if someone from a different "city" than you are in KNOWS your password, and logs in with it. That means that your password has been stolen.

I'm sure we all remember the changing the realm battle.net email recovery issue. Pretty sure GGG is more careful than that.

Same here and very often, the first time I changed my password but now I don't bother anymore... almost every time I log I have to go and get the unlock code ....

"

TeoriadelCaos a écrit :

Same here and very often, the first time I changed my password but now I don't bother anymore... almost every time I log I have to go and get the unlock code ....

Do you have a dynamic IP?

Apparently I have been hacked also. My machine is clean( I just verified this, and its scanned at midnight every night ), I am running security software at all times and the email used was solely made for this game through my ISP. The password was just a random one I made specifically for the account.

Therefore the email I used has never been used anywhere else, nor has the password. The only time the password was used is when I first typed it into the game, and once more after the new security precautions were set up. Ok I lie occasionally when I have to sign into the forums.

This is my gaming machine, and purely used for gaming, and checking official sites. The computer next to me is used for surfing, downloading etc. Learnt to do all this after my *cough cough* WoW account was breached.

I also have a static IP address. The breach was apparently from China.

I like a clean machine for my gaming, saves having to do a more rigorous clean up.

I do not believe my system was breached due to this reason.

Maybe there is a breach on GGG's end they are not aware of yet or not willing to share....

Thanks.

It also happened to me. As far as I know my machine is clean, I scan it regularly. My password that I used was pretty old though. Router has been reset a couple of times, but I haven't played Path of Exile for a while now. So the log in that happened wasn't me.

The log in came from Zhenjiang, Jiangsu, China and I lost everything. Characters still exist, but they are all level 1 and my inventory and stash are empty.


Edit/update: I've had some great contact with support. Although, unfortunately, this won't apply to all of you, but I didn't lose anything. I haven't been playing since the open beta, so because of the account reset of the open beta did my stuff get deleted. It's also explained to me that the hacker got locked out and did not get into the account itself. That's why I received the email with an unlock code, so I could change my password, unlock the game and could continue to play.

...

BTW, "Jiaxing, Zhejiang, China"

Is the location of my hackers....

My account was also logged in by me at my end at the time of the breach?? Interesting

Same here.

All Orbs are stolen...

My account was also accessed by a hacker from Shaoxing, Zhejiang, China.

He didnt get any items as my email has a completely different password.

Im guessing the following is happening:
Data is being gathered by a 3rd party when logging onto the server (data is intercepted during authentication most likely). The 3rd party figured out how to decode it and thus steal both email adres and passwords.

They then log in with the email adres and password. If account requires unlock, they use the same information to access the email account.

And poof, they got your account and items.


If they got into your account and bypassed the locking feature, 1 of 2 things are likely the cause:
The hacker doesnt require a unlock code as he lives nearby.
The hacked person used the same password (or nearly identical) on both email account and PoE account.


The system "should" prevent brute forcing, as support mentioned in a reply to my support email: "As for guessing the unlock code, there is far too many possible combinations so they would not be able to brute force it."

With the sudden uproar on this subject, i guess we shall have to wait for GGG to officially respond after they figured it out.

What I don't understand for my situation is I unlocked my account for my house on the 4th and all my items were intact. I go to login today and it does not prompt me as expected but all of my mats are gone and I never received an email saying there was an attempted login.

*edit* Obviously different passwords from the game to my email.